Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/SDFGAk6pYhavw3HWC4PgqoD8p6Y.roa
File: SDFGAk6pYhavw3HWC4PgqoD8p6Y.roa (raw, json)
Hash identifier: 7Gv0mlqXiC4HazRPXO5qo28ebd0vHbzDQdP1pNOVtdg=
Subject key identifier: 48:31:46:02:4E:A9:62:16:AF:C3:71:D6:0B:83:E0:AA:80:FC:A7:A6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A8B1DEF
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/SDFGAk6pYhavw3HWC4PgqoD8p6Y.roa
Signing time: Sat 01 Jan 2022 04:52:09 +0000
ROA not before: Sat 01 Jan 2022 04:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201893
IP address blocks: 195.136.66.0/23 maxlen: 24
82.177.134.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982195695 (0x3a8b1def)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=483146024ea96216afc371d60b83e0aa80fca7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:53:3f:72:af:5f:cf:8e:96:e3:57:bc:5b:a1:
37:f6:b8:7f:16:9e:2f:31:96:e3:47:e2:c0:d0:2c:
fc:43:8f:95:05:cc:a3:81:f1:a8:35:9c:3a:1f:92:
b7:56:6f:07:cd:0f:1d:55:9f:25:a5:1c:18:5b:b3:
9e:4e:4f:51:42:e4:e4:ae:88:d8:38:a8:8b:96:7a:
a0:09:b8:69:6c:df:92:5b:22:5a:b3:fe:20:8f:d0:
de:53:f4:e3:22:26:07:22:36:64:09:d6:1a:cb:d6:
77:c8:88:67:19:3b:86:71:44:59:63:5e:79:e0:5a:
1c:ef:92:0e:39:9e:c0:78:8a:d7:fc:16:1e:85:a9:
2d:bc:68:8d:8a:68:a5:cd:a2:47:c4:0e:37:c3:36:
bb:fd:ba:ba:ea:35:af:c5:f8:17:ec:7b:e3:fb:bb:
fa:13:23:0c:54:78:67:80:b3:d8:0e:de:e3:c3:bd:
0b:aa:5e:b4:3b:51:7e:fa:79:b1:a8:d5:85:a1:be:
53:01:0f:8c:92:01:08:45:4e:98:91:98:e4:c4:43:
d4:63:07:94:1c:b5:b0:4f:22:17:a0:2c:bf:1f:08:
4c:dd:fa:35:2b:ef:89:31:25:1e:47:66:f9:38:1b:
f4:35:21:d5:eb:67:05:c1:f8:9b:38:b5:9f:13:bb:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:31:46:02:4E:A9:62:16:AF:C3:71:D6:0B:83:E0:AA:80:FC:A7:A6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/SDFGAk6pYhavw3HWC4PgqoD8p6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.134.0/23
195.136.66.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:60:a9:5d:47:a8:b3:05:ac:40:2d:17:1d:c6:95:6a:a9:a6:
b8:eb:18:8d:87:bf:79:09:70:65:c6:55:aa:2a:39:a9:db:e0:
ad:4a:e4:88:5a:b8:1e:48:c9:70:7c:3c:08:58:d7:0a:ba:f0:
eb:f2:07:9b:d3:a6:9e:d0:e7:fe:6a:db:f6:dd:cc:01:6d:89:
df:b6:59:18:95:5e:05:a7:fd:6b:5b:0e:e5:96:4d:d4:be:22:
58:0e:bb:e5:cc:5d:8e:a7:29:61:ea:8a:29:fa:72:4f:5e:a1:
fd:42:2c:b1:f8:3b:1d:62:93:76:dc:f6:4c:4d:54:26:1e:eb:
d5:f6:38:bc:28:84:bf:f4:81:5f:39:c2:de:b1:7f:7b:33:7d:
cc:72:7d:7e:11:92:2c:5c:8e:8b:3c:bd:b8:f4:5e:6f:b7:9a:
20:6f:28:84:e3:3e:9a:ff:88:f1:dc:9c:43:a7:8d:5f:21:df:
6d:11:2c:fa:da:e6:bb:aa:ba:52:eb:ab:71:39:65:3e:74:97:
ad:46:8c:db:07:67:0d:8b:64:34:61:45:e2:66:1a:18:ce:5e:
a8:76:23:36:5b:2d:15:bc:21:c6:18:79:0c:4b:5b:c1:a7:17:
e3:3a:bd:61:8e:c4:b9:27:fd:ee:21:c3:f1:f0:53:33:0a:f4:
2a:f4:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:27 2025 by rpki-client